ClamWin Free Antivirus :: View topic

Posted: Tue Sep 17, 2013 8:59 pm

It looks like Clam AV has integrated the daily database into the main database and also did some pruning of the main database. ClamWin scans should now be a bit faster for everyone because of this.

Regards,

Posted: Thu Sep 19, 2013 1:42 pm

Hi!

--------------------------------------
ClamAV update process started at Tue Sep 17 16:02:45 2013
main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
[b]Downloading daily-17868.cdiff [100%]
Downloading daily-17869.cdiff [100%]
daily.cld updated (version: 17869, sigs: 1731301, f-level: 63, builder: neo)
bytecode.cld is up to date (version: 225, sigs: 42, f-level: 63, builder: dgoddard)
Database updated (2775730 signatures) from database.clamav.net (IP: 208.70.244.158)
--------------------------------------

This was my last successful update, then followed;

--------------------------------------
ClamAV update process started at Tue Sep 17 18:42:04 2013
nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host database.clamav.net (IP: 24.215.0.24)
Trying host database.clamav.net (200.236.31.1)...
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
ClamAV update process started at Tue Sep 17 18:47:29 2013
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from database.clamav.net (IP: 24.215.0.24): Operation already in progress
WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net
WARNING: getfile: Unknown response from remote server (IP: 208.70.244.158)
WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from database.clamav.net (IP: 128.177.8.248): Operation already in progress
WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
ClamAV update process started at Tue Sep 17 18:51:04 2013
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in c:\windows\temp\tmpzxuscj is working. Check https://www.clamav.net/support/mirror-problem for possible reasons.
--------------------------------------

You will note that it was only 2 hours 40 minutes later on the same day; September 17. Since then, all attempts have failed. Usually. after 20-30 minutes, I let go, but last night I left the PC complete the entire charade, it took a bit more than one hour, and got this;

--------------------------------------
ClamAV update process started at Thu Sep 19 00:27:56 2013
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
ClamAV update process started at Thu Sep 19 00:31:13 2013
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Trying again in 5 secs...
ClamAV update process started at Thu Sep 19 01:00:44 2013
Downloading main-55.cdiff [100%]
WARNING: [LibClamAV] cli_ndecode: value out of range
ERROR: cdiff_apply: Incorrect digital signature
ERROR: getpatch: Can't apply patch
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
ERROR: Verification: Can't verify database integrity
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the mirrors listed in c:\windows\temp\tmpcb5pnz is working. Check https://www.clamav.net/support/mirror-problem for possible reasons.
--------------------------------------

The "Downloading main-55.cdiff [100%]" and "Downloading main.cvd [100%]" messages are deceptive; in fact, the progression was about 1% every 5-10 minutes and would suddenly give 100% before reaching (I think) 10% (I was never in front of the PC when it happened).

So here I am.

I did went to the site mentioned at the end of the failed update log, was redirected to another site, and got a long list of possible tweaks and fiddlings that I was in no mood or inclination to try in the wee morning hours.

I use and old W98SE machine plugged in a dial-up modem (56 K). ClamWin version 0.97.8.

Considering that my problems started at the same time as the "new and improved" daily database of ClamAv, I see more than a simple coincidence in all of that.

Any ideas?

Regards,

POST SCRIPTUM
Stop the press!!!

Minutes after writing this message, my auto-update window flashed a "successful update". Just to be on the safe side, I updated again manually;

ClamAV update process started at Thu Sep 19 12:07:51 2013
main.cld is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
daily.cvd is up to date (version: 17871, sigs: 353853, f-level: 63, builder: neo)
bytecode.cld is up to date (version: 226, sigs: 43, f-level: 63, builder: neo)

--------------------------------------
Completed
--------------------------------------

That said, I don't understand what got broken and how it was repaired, but who cares? Very Happy

Posted: Sun Sep 22, 2013 3:43 pm

GuitarBob wrote:

It looks like Clam AV has integrated the daily database into the main database and also did some pruning of the main database.

It also looks like ClamAV 0.98 has been released on Thu 19 September:
https://lurker.clamav.net/message/20130919.190453.7177bd47.en.html

Posted: Mon Sep 23, 2013 3:34 am

tizef

If you're running WIN 9x, I wouldn't even bother with an AV of any kind. Time to use SSM or some other hips. Ten to one, the sigs which Clam just dumped were the ones WIN 9x needed the most. AVs are NOT for 9x now.

I do NOT use an AV with 9x/ME PCs, and I live on web pages trying to infect me -- XXXXX web sites, perv and nerd-perv posting boards, and more.

I'd think seriously about SSM (and F-PROT for DOS if you want to scan yourself, otherwise try Jotti or Virus Total).

Dave

Posted: Wed Oct 02, 2013 5:24 am

Clam Sentine will protect Win 98!